Re: My Assessment of the Heartbleed OpenSSL bug and LedgerSMB

Subject: Re: My Assessment of the Heartbleed OpenSSL bug and LedgerSMB

From: Chris Travers <..hidden..>

Date: Thu, 10 Apr 2014 05:00:39 -0700

On Thu, Apr 10, 2014 at 3:49 AM, Peter van Bussel <..hidden..> wrote:

Ouch!

To be clear, we aren't directly affected. The attack is against a web server and there may be plenty of possible and supported configurations that are not affected.

However, this is a serious situation even if it is not in our code and requires no upgrades of LedgerSMB and I wanted to share my assessment of this with the community. Virtually every e-commerce site should consider themselves affected too if they rely on OpenSSL.

Best Wishes,

Chris Travers

Efficito: Hosted Accounting and ERP. Robust and Flexible. No vendor lock-in.

http://www.efficito.com/learn_more

------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees